Your information, handled with care.

Bidaway is operated by Gatewiser LLC ("Bidaway", "we", "us"). This Privacy Policy explains what information we collect when you use bidaway.co (the "Site"), how we use it, and the choices you have. By using the Site you agree to this policy and to our Terms and Conditions.

Information we collect

Information you give us

• Profile details: your name, email address and password (stored only as a one-way hash).
• Travel preferences: your dream destination and escape budget, if you set them, and the escapes you save to your wishlist.
• Bids and trips: the escapes you bid on, your bid amounts and times, the auctions you win, and the travel dates and traveler names you give us when we confirm a won escape.
• Mobile phone number: only if you choose to add it. Your number and your text message consent are described in the Text messaging section.
• Messages to us: anything you include when you contact us by email or through the contact form.

Information collected automatically

When you use the Site we and our hosting provider record standard technical information such as your IP address, browser type, the pages you visit and the time of each request. This is used to operate, secure and improve the Site. We use a strictly necessary session cookie to keep you signed in and to protect forms against forgery. We do not use advertising cookies or third party analytics scripts on the Site.

Payment information

We do not collect card numbers on the Site. When you win an escape, payment is completed through a secure payment link operated by our payment provider, which processes your payment details under its own privacy policy. We receive confirmation of the payment, not your card details.

How we use information

• To create and maintain your profile and show you your bids, wishlist and trips.
• To run the auctions: record bids, determine the winning bid and notify you of results.
• To confirm, book and support the escapes you win, including sharing traveler names and dates with the hotel or supplier.
• To send service emails such as welcome messages, outbid alerts (if enabled), auction results, booking confirmations and password reset links.
• To send text messages if, and only if, you have opted in.
• To protect the Site, prevent fraud and comply with law.

How we share information

We do not sell personal information. We share information only in these cases:

• Service providers: companies that host the Site, deliver email, deliver text messages or process payments on our behalf. They may use the information only to provide that service to us.
• Travel suppliers: the hotel, villa or experience provider of an escape you have won receives the traveler names and dates needed to make your booking.
• Legal reasons: when required by law, legal process, or to protect the rights, safety and property of Bidaway, our users or others.
• Business transfers: if Gatewiser LLC is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction under this policy.

Destination photographs on the Site are served by Unsplash, which receives the image requests from your browser, including your IP address, under its own privacy policy.

Text messaging

If you opt in to text messages from Bidaway, we collect your mobile phone number, the date, time and source of your consent, the exact consent language you agreed to, and the messages we exchange with you. We use this information only to send you the messages you asked for, to respond to your requests, to honor opt-outs, and to keep a record of your consent.

We send only transactional text messages for app notifications: confirmations about your profile, bid confirmations, outbid alerts, auction results, updates about your trips, and replies to your questions. We do not send marketing or promotional text messages.

Opting in is never required to create a profile, to bid or to complete a purchase. Text message consent is collected with its own unchecked box and is separate from accepting these policies.

No mobile information will be sold or shared with third parties for promotional or marketing purposes. We share text messaging information only with service providers that deliver the messages on our behalf (such as our messaging provider), who may use it solely for that purpose. Text messaging opt-in data and consent are not shared with any third parties, excluding the aggregators and providers that deliver the messages.

You can opt out at any time by replying STOP to any message. You will receive one confirmation message and nothing further. You can also remove your number or uncheck text messages under Settings, or email us at contact@bidaway.co. For help, reply HELP or contact us by email. The full program terms are in the SMS Terms section of our Terms and Conditions.

How long we keep information

We keep your profile information for as long as your profile exists. If you delete your profile under Settings, your profile, preferences, wishlist and password are deleted. Records of won escapes and payments are kept for the period required by tax and consumer law. We keep a minimal record of text message consent and opt-out events (phone number, time, source and consent language) as evidence that messaging was authorized and stopped. Technical logs are kept for a limited period for security purposes.

Your choices and rights

• You can view and edit your name, travel preferences and outbid email setting at any time under Settings.
• You can add, change or remove your mobile number and text message preference under Settings.
• You can delete your profile under Settings, or email us to request deletion.
• Depending on where you live, you may have the right to access, correct or delete personal information, or to object to certain uses. To exercise these rights, email us at the address below. We will verify your request and respond within the time required by applicable law. We do not discriminate against you for exercising your rights.

Children

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us and we will delete it.

Security

We protect your information with HTTPS, hashed passwords, access controls and regular reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes are announced on the Site or by email.

Contact

Questions or requests about privacy? Email contact@bidaway.co or write to Gatewiser LLC, 30 N Gould Street, Sheridan, WY 82801, United States.